Synology Storage Analyzer 路径遍历漏洞

Synology Storage Analyzer is a storage analyzer from Synology China. It allows you to quickly view overall Synology NAS usage trends, create and manage tasks to analyze storage space, and generate detailed reports on volume usage. A path traversal vulnerability exists in Synology Storage Analyzer...

CVE-2022-27618

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in webapi component in Synology Storage Analyzer before 2.1.0-0390 allows remote authenticated users to delete arbitrary files via unspecified vectors...

Security Bulletin: IBM InfoSphere Information Analyzer is affected by a cross-site scripting vulnerability in jQuery-UI(CVE-2021-41184)

Summary A cross-site scripting vulnerability in jQuery-UI used by IBM InfoSphere Information Analyzer was addressed. Vulnerability Details CVEID:CVE-2021-41184 DESCRIPTION: jQuery jQuery-UI is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the .positio...

The vulnerability of the syntactic analyzer in Firefox web browsers allows attackers to perform cross-site scripting attacks.

The vulnerability of the syntactic analyzer in Firefox browsers is related to improper handling of code generation during the processing of HTML comment tags. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

USN-5515-1: Linux kernel vulnerabilities

Eric Biederman discovered that the cgroup process migration implementation in the Linux kernel did not perform permission checks correctly in some situations. A local attacker could possibly use this to gain administrative privileges. CVE-2021-4197 Jann Horn discovered that the FUSE file system i...

Gallia - Extendable Pentesting Framework

Gallia is an extendable pentesting framework with the focus on the automotive domain. The scope of gallia is conducting penetration tests from a single ECU up to whole cars, with the main focus on the UDS interface. Taking advantage of this modular design, the logging and archiving functionality...

The vulnerability of the Visual Analyzer component of the Oracle Business Intelligence Enterprise Edition software platform allows a perpetrator to gain access to read data or modify data.

The vulnerability of the Visual Analyzer component of the Oracle Business Intelligence Enterprise Edition software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read data or modify data through HTTP...

The vulnerability of the command-line interface analyzer in Cisco FirePOWER Services Software for ASA allows a hacker to execute arbitrary commands.

The vulnerability of the command-line interface analyzer in Cisco FirePOWER Services Software for ASA is related to errors in processing uncertain command parameters. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges remotely...

Malicious code in ota-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 189cf5e89d73efd981be43713e20b6c15b3fa9935d43ae11b6054cd989510e4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5144 Malicious code in ota-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 189cf5e89d73efd981be43713e20b6c15b3fa9935d43ae11b6054cd989510e4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bem-xjst-static-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5c3910628bae004c82b2e78a7ee1be3d4fd038c3335d0f7ac0d3285ee25f45a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-video-analyzer-edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0127d81ea77498d7cf290baf7482fe497d0e7159bcb6b3eda4229b01510592b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1390 Malicious code in azure-video-analyzer-edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0127d81ea77498d7cf290baf7482fe497d0e7159bcb6b3eda4229b01510592b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in move-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f495b9ee22af734969a0331f448e1c1eca756f7f7bb79cdabbcea1aac84e6b0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4701 Malicious code in move-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f495b9ee22af734969a0331f448e1c1eca756f7f7bb79cdabbcea1aac84e6b0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arm-videoanalyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f39dca054bbd4f9bec0819add6b85d88265fcd32be99943ff9f4635301d23673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in video-analyzer-edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac613c03bdd68c13b5218b3bb429896bae83aa05e52d2f7cc78e2925f26c536e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6914 Malicious code in video-analyzer-edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac613c03bdd68c13b5218b3bb429896bae83aa05e52d2f7cc78e2925f26c536e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-video-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d19222ce6e1dd7c45c8710269aa3c0c829228176538a588520edeaf0480d5e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1389 Malicious code in azure-video-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d19222ce6e1dd7c45c8710269aa3c0c829228176538a588520edeaf0480d5e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...